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FAA  AIRCRAFT  SEPARATION  ASSURANCE 
TECHNICAL  DEVELOPMENTS 


On  December  27,  1978,  the  Secretary  of  Transportation  and  the 
Federal  Aviation  Administrator  announced  a comprehensive  program 
intended  to  further  improve  the  safety  of  the  flying  public.  In 
that  "Plan  for  Enhanced  Safety  of  Flight  Operations  in  the 
National  Airspace  System,"  the  Administrator  announced  a series 
of  actions  intended  to  provide  a high  level  of  protection  for 
the  flying  public  while  retaining  a large  degree  of  freedom  of 
airspace  usage  consistent  with  this  safety  goal.  The  plan  de- 
scribes a series  of  programs  to  be  implemented  and  other  pro- 
grams that  are  planned  and  being  proposed.  It  is  clear  that  no 
single  action  will  ensure  the  desired  level  of  safety  as  the 
density  of  traffic  rises,  but  that  a series  of  integrated  ser- 
vices is  needed  to  achieve  and  maintain  the  high  level  of  safety 
to  which  the  American  public  has  become  accustomed. 


It  is  the  purpose  of  this  paper  to  provide  background  on  the 
portion  of  the  FAA  plan  that  relates  to  the  technical  systems 
needed  for  aircraft  separation  assurance  and  future  avionics 
requirements.  This  discussion  will  deal  with  the  technology 
developments  and  the  rationale  for  the  actions  taken  and  pro- 
posed. 


Summary  of  the  Plan 

The  Administrator's  plan  calls  for  increasing  radar  services  at 
80  air  carrier  airports,  establishing  mandatory  terminal  control 
areas  at  44  additional  locations  and  putting  most  of  the  busiest 
air  routes  above  10,000  feet  under  direct  air  traffic  control. 

In  addition  to  these  measures,  the  FAA  will  propose  regulations 
requiring  wider  use  of  altitude  reporting  Air  Traffic  Control 
Radar  Beacon  System  (ATCRBS)  transponders  by  all  aircraft  opera- 
tors and  installation  of  collision  avoidance  systems  in  most 
airliners  as  soon  as  this  equipment  becomes  available. 

FAA  also  will  expedite  ongoing  research  and  development  efforts 
in  the  air  traffic  control  field  and  continue  with  the  instal- 
lation of  additional  safety  facilities  at  airports.  For  ex- 
ample, the  FAA  will  install  24  instrument  landing  systems  fILS) 
at  general  aviation  (non-airline)  airports  in  large  metropolitan 
areas  to  accommodate  practice  instrument  approaches.  It  also 
will  install  equipment  at  eight  airport  control  towers  that  will 
permit  direct  radar  readout  of  such  vital  flight  information  as 
aircraft  identity  and  altitude. 
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As  a consequence  of  the  research  and  development  on  aircraft 
separation  assurance,  FAA  plans  to  issue  an  advance  notice  of 
proposed  rule  making  in  March  1979,  soliciting  industry  and 
public  comments  on  such  additional  regulations  as: 

0 Requiring  altitude-reporting  Beacon  transponders  for  all 
aircraft  operations  in  Terminal  Control  Areas  and  Termi- 
nal Radar  Service  Areas  (TCA/TRSA)  by  July  1981.  In 
addition,  all  transponders  installed  in  aircraft  after 
July  1982  will  be  required  to  be  a new  version  known  as 
the  Discrete  Address  Beacon  System  fDABSl  which  among 
other  evolutionary  improvements  provides  a means  for 
automatic  "data  link"  communications  for  use  with  a 
ground-based  collision  avoidance  system. 

0 Requiring  all  airliners  and  air  taxi  aircraft  to  carry 
an  Active  Beacon  Collision  Avoidance  System  (BCAS)  by 
January  1985.  This  device  triggers  transponder  replies 
from  other  aircraft,  evaluates  the  position  and  altitude 
information  and  advises  the  pilot  when  a potential  prob- 
lem exists  and  what  evasive  action  is  necessary,  if  any. 

Objectives  of  the  Plan 

The  National  Airspace  System  consists  of  two  operational  modes: 

0 A system  of  controlled  airspace,  in  which  separation  is 
provided  by  procedural,  radar  or  visual  means  along  de- 
fined routes  and  airways  for  aircraft  in  contact  with 
the  air  traffic  control  services  and  operating  under 
Instrument  or  Controlled  Visual  Flight  Rules.  The  plan 
expands  the  airspace  in  which  control  and  separation 
services  are  provided  and  made  obligatory. 

0 A system  of  uncontrolled  airspace,  which  operates  under 
Visual  Flight  Rules  (VFR),  is  used  heavily  by  general 
aviation,  and  "elies  primarily  on  procedures  and  see- 
and-avoid  as  its  means  of  collision  avoidance. 

The  two  modes  have  distinctly  different  mid-air  collision  prob- 
lems. The  large  majority  of  collisions  have  occurred  outside  of 
control  in  VFR  airspace,  most  frequently  between  general  avia- 
tion aircraft  with  one  or  two  occupants,  near  uncontrolled  air- 
ports. However,  a collision  risk  exists  in  controlled  airspace 
as  well,  as  evidenced  by  FAA  system  error  reports,  pilot  near- 
midair collision  reports,  and  reports  through  the  Aviation 
Safety  Reporting  System.  That  risk,  though  historically  small, 
rises  as  traffic  density  rises.  The  features  of  the  plan  are 
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intended  primarily  to  reduce  the  collision  risks  within  the 
controlled  system. 

The  plan  takes  a dual  approach  to  collision  avoidance  or  air- 
craft separation  assurance.  This  approach  provides  for  a 
ground-based  primary  system,  backed  up  by  an  airborne  system. 
The  two  work  together  to  provide  maximum  protection  to  the 
greatest  number  of  people  who  fly. 

This  paper  describes  the  Automatic  Traffic  Advisory  and  Resolu- 
tion Service  and  the  Discrete  Address  Beacon  System  that  makes 

it  possible,  the  development  of  airborne  collision  avoidance 

systems,  and  the  relationships  among  them.  It  also  touches 

briefly  on  an  FAA  development  concept  called  the  Automated  Term- 
inal Service  which  may  bring  a level  of  additional  collision 

protection  to  uncontrolled  airports  where  historically  the 
largest  numbers  of  collisions  have  occurred. 

Background  Facts 

Eight  years  of  National  Transportation  Safety  Board  collision 
statistics  (Figure  1)  show  that  collisions  occur  most  frequently 
outside  the  control  system  or  at  the  boundary  between  controlled 
and  uncontrolled  airspace.  Over  the  eight-year  period  1970-1977 
there  were  187  collisions  between  two  uncontrolled  VFR  aircraft, 
with  228  fatalities.  In  addition,  there  were  13  collisions  in- 
volving one  controlled  and  one  uncontrolled  aircraft,  with  105 
fatalities.  While  the  1978  San  Diego  collision  is  not  repre- 
sented in  these  data,  it  remains  true  that  there  are  relatively 
few  collisions  involving  air  carrier  aircraft,  and  most  air 
carrier  fatalities  have  occurred  under  circumstances  in  which  a 
controlled  air  carrier  aircraft  encountered  an  uncontrolled 
military  or  general  aviation  aircraft. 

However,  even  without  the  San  Diego  case,  this  record  is  not 
satisfying,  in  that  other  measures  of  safety  indicate  that  risks 
of  potential  collisions  continue  to  exist  in  the  controlled  sys- 
tem. This  is  shown  by  the  high  air  carrier  involvement  in  inci- 
dent reports  shown  in  the  statistics  listed  in  the  lower  portion 
of  Figure  1. 

The  FAA  has  for  several  years  collected  system  error  reports 
from  controllers  and  near-midair  collision  reports  from  pilots. 
These  reports  are  investigated  and  verified.  Figure  1 shows  a 
compilation  of  reports  in  each  category.  These  data  show  a high 
involvement  of  air  carriers  and  a large  concentration  of  inci- 
dents within  the  terminal  area. 
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A new  and  additional  concern  has  been  raised  by  the  Aviation 
Safety  Reporting  System  administered  by  NASA.  Among  the  reports 
received,  228  reports  in  the  first  year  and  half  of  operation 
concerned  altitude  deviations.  These  were  all  reported  out  of 
the  controlled  system,  and  consisted  of  aircraft  which  for  one 
reason  or  another  flew  through  their  altitude  clearances.  These 
reports  are  over  50%  air  carrier,  and  one  in  ten  led  to  a loss 
of  vertical  separation.  While  there  are  limitations  in  the  NASA 
reporting  system,  in  that  the  reports  are  from  single  indivi- 
duals and  not  verified  by  investigation,  this  represents  another 
dimension  of  mid-air  collision  risk  within  the  controlled  system. 

In  sum,  the  majority  of  risk  of  collision  fatalities  for  air 
carriers  is  concentrated  in  the  terminal  area  part  of  the  con- 
trolled system  where  traffic  densities  are  high.  Because  of  the 
traffic  mix,  the  air  carrier  risk  is  highest  at  the  fringes  of 
the  terminal  control  system.  In  contrast,  most  of  the  general 
aviation  collisions  occur  at  the  12,500  small  airports  where 
there  are  no  control  facilities.  These  two  areas  are  importa.it 
facets  of  the  collision  problems  addressed  by  FAA's  Aircraft 
Separation  Assurance  Program. 

Collision  Avoidance  Systems  Development 

FAA's  development  programs  for  airborne  collision  avoidance  sys- 
tems are  intended  to  produce  systems  that  work  under  all  weather 
and  traffic  conditions.  They  are  intended  to  electronically 
"see"  all  aircraft  of  concern,  to  use  computers  to  automatically 
detect  possible  threats,  and  to  display  to  the  pilot  (and  the 
controller,  in  some  approaches)  an  alert,  along  with  a recom- 
mended maneuver  command  to  avoid  a collision.  They  are  intended 
to  operate  integrally  with  the  ATC  system  in  controlled  air- 
space, and  in  some  designs  to  provide  a measure  of  protection  to 
equipped  aircraft  in  uncontrolled  airspace  as  well. 


To  illustrate  this  concept,  consider  that  the  system  functions 
by  setting  up  an  electronic  shield  around  the  protected  aircraft 
(Figure  2).  Any  other  aircraft  that  is  projected  to  pass 
through  this  shield  within  a pre- determined  time  will  cause  an 
alarm  accompanied  by  a recommended  maneuver.  This  pre-set  time, 
known  as  the  warning  time,  is  typically  30  to  40  seconds. 

The  size  and  shape  of  the  electronic  shield  is  critical,  since  a 
shield  that  is  too  large  or  improperly  shaped  will  cause  too 
many  false  or  unwanted  alarms,  while  one  which  is  too  small  (or 
improperly  shaped)  will  not  provide  sufficient  protection. 
Further,  it  is  difficult  to  control  the  size  and  shape  of  the 
electronic  shield,  since  it  is  determined  by  factors  such  as  the 
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ACTUAL  COLLISIONS 
1970-1977  (NTSB) 


FIGURE  1 

MEASURES  OF  MIDAIR  COLLISION  RISK 


ability  to  precisely  measure  the  position  of  another  aircraft, 
the  response  time  of  the  aircraft  involved,  the  pilot  response 
time,  the  relative  closure  speeds,  the  ATC  separation  standards 
in  effect  at  the  time,  terrain  and  obstacle  avoidance,  airport 
configuration,  and  the  like. 

The  word  "projected"  was  used  to  describe  the  path  of  the  other 
aircraft  of  concern.  Not  all  collision  avoidance  concepts  have 
knowledge  of  pilot  intent,  and  airborne  collision  avoidance  sys- 
tems never  do.  If  a pilot  intends  to  change  flight  path  in  the 
next  30  to  40  seconds,  but  at  the  moment  appears  to  be  on  a 
course  that  would  pierce  the  protected  volume,  the  system  will 
alarm.  This  is  troublesome  in  the  denser  terminal  areas  where 
turning  aircraft  are  the  rule  rather  than  the  exception,  and  is 
an  additional  source  of  false  or  unwanted  alarms. 

Third,  false  alarms  may  be  unsafe.  If  a pilot  executes  a maneu- 
ver based  on  a false  alarm,  it  is  necessary  to  assure  that  this 
does  not  place  him  suddenly  in  conflict  with  another  aircraft 
operating  on  a perfectly  safe  course. 

Finally,  collision  avoidance  systems  differ  radically  in  their 
ability  to  establish  these  electronic  screens.  Some  devices  can 
provide  only  one  or  two  shapes  of  screens,  while  others  can  con- 
tinually vary  their  protective  shields  as  different  situations 
or  airspac’  regions  are  encountered.  The  FAA  and  various  equip- 
ment manufacturers  have  been  experimenting  with  a number  of 
collision  avoidance  system  concepts  and  designs  since  the  late 
1950's.  The  earliest  of  these  were  a series  of  Airborne  Colli- 
sion Avoidance  Systems  (ACAS),  whose  history  is  described  in 
Appendix  A.  As  discussed  there,  a detailed  evaluation  of  all 
contending  ACAS  concepts  was  completed  in  1975,  with  the  con- 
clusion that  none  could  form  the  basis  for  system-wide  collision 
protection  either  in  uncontrolled  or  in  high  density  controlled 
airspace. 

Following  this  evaluation,  and  faced  by  what  some  felt  were  in- 
surmountable technological  limits,  the  FAA  held  a series  of 
public  meetings  on  the  collision  avoidance  question  in  the 
period  September  1976  through  February  1977.  These  conferences 
were  widely  attended  by  all  segments  of  the  aviation  and  user 
community.  The  objective  was  to  review  the  results  of  the 
tests,  and  to  consider  various  new  technologies  under  parallel 
development  by  FAA  and  DOD  that  held  promise  of  eliminating  many 
of  the  shortcomings  of  the  ACAS  systems. 

As  a result  of  these  and  other  activities,  a comprehensive, 
multi-faceted  approach  to  the  collision  avoidance  problem  was 
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formulated,  blending  together  requirements  from  the  pilot  and 
user  community  as  well  as  the  new  technologies  under  development 
at  the  time. 


This  approach,  which  FAA  calls  the  Aircraft  Separation  Assurance 
Program,  forms  the  basis  for  the  current  development  efforts. 

Cornerstones  of  the  Aircraft  Separation  Assurance  Effort 

The  following  are  the  cornerstones  of  the  aircraft  separation 
assurance  philosophy  as  it  relates  to  the  technical  systems 
development: 

0 First,  even  using  the  latest  technology,  FAA  does  not 
believe  it  is  possible  to  develop  a single  Collision 
Avoidance  System  that  will  meet  the  need  in  all  environ- 
ments (controlled  vs.  uncontrolled,  high  vs.  low  den- 
sity). A mix  of  collision  avoidance  devices  will  be 
required.  Independent  but  coordinated  airborne  and 
ground-based  solutions  to  this  problem  are  needed. 

0 Second,  providing  high  quality  collision  avoidance  ser- 
vice in  the  denser  terminal  areas  requires  that  the 
electronic  protective  screen  discussed  earlier  be  tai- 
lored on  a site-by-site  basis  to  account  for  differences 
in  operational  procedures,  separation  standards,  ob- 
structions, runway  configuration,  etc.  To  be  practical, 
this  requires  the  of  ground-based  collision  avoid- 
ance service  thp  individual  high  density 

airport. 

0 Third,  the  need  to  achieve  earliest  possible  protection 
for  the  largest  number  of  aircraft  and  passengers,  re- 
quires that  users  who  equip  can  receive  protection  from 
other  aircraft  which  are  equipped  only  with  altitude- 
reporting  transponders. 

0 Fourth,  the  capability  to  incorporate  a system  to  pro- 
vide the  pilot  with  a display  of  surrounding  traffic  as 
well  as  a maneuver  advisory  is  a highly  desirable  poten- 
tial future  capability  of  any  anti-collision  system. 

0 Fifth,  it  is  essential  to  allow  for  evolutiyi  of  the 
system  in  a manner  compatible  with  future  ATC  system 
evolution. 

FAA's  program  is  designed  to  satisfy  these  fundamental  require- 
ments. 
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FAA  is  pursuing  several  separate  but  coordinated  technical 
developments  as  a part  of  the  separation  assurance  effort.  It 
should  be  stressed  that  this  effort  is  possible  only  because  of 
the  recent  advent  of  large  scale  microprocessing  technology; 
technology  that  did  not  exist  even  a few  years  ago.  The  major 
elements  of  this  program  are:  the  Automatic  Traffic  Advisory 
and  Resolution  Service  for  high  density  controlled  airspace  and 
the  Discrete  Address  Beacon  System  that  supports  this  service; 
an  active  Beacon  Collision  Avoidance  Systems  for  lower  density 
controlled  airspace  and  some  uncontrolled  airspace  areas  as 
well;  a full-capability  BCAS  development  applicable  to  all  air- 
space; En  Route  Conflict  Alert  and  Resolution,  and  Terminal  Con- 
flict Alert  services;  and  the  development  of  the  concept  of  an 
Automated  Terminal  Service. 

Conflict  Alert/Conflict  Resolution 


Conflict  Alert,  the  initial  phase  of  the  aircraft  separation 
assurance  program,  is  already  operational  in  most  of  the 
National  Airspace  System.  In  en  route  airspace  Conflict  Alert 
warns  controllers  of  potential  separation  minima  violations  two 
minutes  before  they  occur.  Altitude  clearances  can  be  manually 
inserted  into  the  computer  by  the  controller,  which  serves  to 
inhibit  the  generation  of  a number  of  false  alarms.  This  system 
is  currently  implemented  above  FL230  in  all  centers,  and  in  well 
over  half  of  the  low-altitude  sectors.  The  system  is  also 
usable  on  primary  radar  targets  with  manual  insertion  of  alti- 
tude and  manual  track  initiation. 

In  the  terminal  area.  Conflict  Alert  warns  controllers  of  poten- 
tial separation  minima  violations  some  40  seconds  in  advance. 
The  logic  currently  uses  1.2-mile  horizontal  and  400-foot  verti- 
cal separation  minima  criteria.  The  system  is  currently  imple- 
mented in  all  of  the  ARTS  III  terminals  except  the  dual  beacon 
sites,  which  are  scheduled  for  implementation  this  year. 

Although  the  system  warns  of  impending  violations  of  separation 
minima,  it  does  not  provide  a secondary  backup  to  protect 
against  human  errors  by  the  controller  in  generating  and  issuing 
resolution  clearances,  or  by  the  pilot  in  executing  a clearance 
which  was  generated  as  a result  of  the  conflict  alert.  Conflict 
Alert  tells  the  controllers  when  a conflict  situation  starts  and 
finishes.  The  controller,  however,  can  suppress  the  alert,  and 
no  second  warning  is  given  if  the  situation  fails  to  resolve 
itself.  In  short,  there  is  no  effective  backup  in  the  case  of 
human  error,  such  as  clearance  or  altitude  violations. 
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Conflict  Alert  will  be  effective  in  warning  the  controller  of 
system  errors.  In  most  cases,  this  will  result  in  successful 
resolution.  In  some  percentage  of  the  cases,  however,  where 
human  errors  occur,  an  automatic  backup  is  needed.  This  need 
will  be  met  by  other  elements  of  the  aircraft  separation  assur- 
ance system. 

Conflict  Resolution  is  an  advisory  assistance  to  the  controller 
in  resolving  an  en  route  conflict  alert  situation.  Development 
work  is  starting  on  the  definition  of  the  conflict  resolution 
function  for  use  in  the  en  route  center  areas.  As  currently 
envisioned.  Conflict  Resolution  would  offer  the  controller  a 
family  of  acceptable  solutions,  leaving  the  selection  of  the 
actual  resolution  for  any  given  conflict  up  to  the  controller. 
It  is  envisioned  that  the  Conflict  Resolution  advisories  would 
be  given  to  the  controller  at  the  time  that  the  original  Con- 
flict Alert  is  displayed. 

Automatic  Traffic  Advisory  and  Resolution  Service 

To  address  the  high  density  airport  problem  ^ as  well  as  other 
airspace  regions),  FAA  is  working  on  a system  which  uses  ground- 
based  computers  tailored  to  the  requirements  of  an  individual 
airport.  This  system  is  called  Automatic  Traffic  Advisory  and 
Resolution  Service  (ATARS),  illustrated  in  Figure  3. 

ATARS  makes  use  of  ground  computers  which  operate  independently 
from  the  normal  ATC  computers  and  from  the  controllers  them- 
selves. This  system  employs  an  upgraded  radar  transponder  sys- 
tem known  as  the  Discrete  Address  Beacon  System  (DABS)  being 
developed  to  serve  a variety  of  future  ATC  system  needs.  This 
new  DABS  system  is  fully  compatible  and  evolutionary  with 
today's  ATC  system,  and  will  incorporate  an  automatic  communi- 
cation channel  --  a data  link  — between  the  aircraft  and  these 
ground  collision  avoidance  computers.  This  system  will  provide 
the  needed  information  on  transponder-equipped  aircraft  in  all 
weather  conditions,  will  include  distance,  altitude,  direction 
and  identity,  and  can  be  implemented  without  making  obsolete  the 
existing  ATC  safety  systems. 

Once  the  necessary  equipment  is  installed  on  the  ground,  a user 
must  buy  a new  airborne  Discrete  Address  transponder  and  a dis- 
play of  his  choice  to  make  use  of  the  service.  This  new  trans- 
ponder can  replace  his  present  ATC  Beacon  transponder  at  a 
modest  cost  increment,  and  will  utilize  the  existing  altitude 
encoder  systems  that  are  a necessary  element  of  collision  avoid- 
ance protection.  Once  an  aircraft  has  the  DABS  transponder  and 
ATARS  data  link  equipment  installed,  it  will  receive  immediate 
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protection  within  the  ATARS  service  areas  against  any  other  air- 
craft equipped  either  with  today's  ATC  Beacon  transponder  and 
altitude  encoding  system  or  with  the  new  Discrete  Address  trans- 
ponder. This  will  ensure  that  the  first  aircraft  that  equips 
will  receive  substantial  protection  immediately,  since  the  alti- 
tude encoding  ATC  Beacon  transponder  system  is  already  widely 
implemented,  and  is  currently  required  by  law  for  operating 
above  12,500  feet  and  in  a number  of  terminal  areas. 

Final  testing  of  the  DABS  system  has  begun  at  the  FAA  National 
Aviation  Facilities  Experimental  Center  (NAFEC),  in  Atlantic 
City,  New  Jersey.  The  ATARS  portion  has  been  delivered  by  the 
contractor,  Texas  Instruments,  and  testing  of  this  portion  is 
expected  to  begin  in  the  summer  of  1979. 

Beacon-based  Collision  Avoidance  Systems 

It  was  noted  above  that  no  single  system  satisfies  the  total 
need,  and  that  a mix  of  ground  and  airborne  systems  is  neces- 
sary. The  ATARS  system  is  no  exception  — it  has  known  limita- 
tions. Even  in  its  ultimate  form,  it  can  provide  service  only 
within  Discrete  Address  Beacon  coverage,  leaving  a need  to 
develop  a collision  avoidance  system  that  works  outside  of  DABS 
coverage.  To  fill  this  gap,  and  to  provide  a level  of  backup 
within  coverage,  FAA  is  developing  two  versions  of  on  airborne 
collision  avoidance  system  known  as  BCAS  — Beacon  Collision 
Avoidance  System.  The  term  "Beacon"  stems  from  the  fact  that 
these  systems,  like  their  cooperative  ATARS  counterpart,  can  use 
the  present  altitude  reporting  ATC  transponder  or  the  future 
DABS  transponder  as  the  common  element  (Figure  4).  There  are 
two  BCAS  designs  that  differ  significantly  in  their  capabilities: 

Active  BCAS 

The  first  and  the  simpler  of  these  not-so-simple  systems  has 
been  named  "Active  BCAS."  It  is  similar  in  concept  to  the 
earlier  ACAS  systems  except  that  it  capitalizes  on  the  essential 
protection  and  evolutionary  advantages  of  being  Beacon  based. 
Like  its  ACAS  predecessors,  because  of  the  inavailability  of 
directional  information  it  can  provide  only  vertical  maneuvers 
(climb/dive).  The  basic  protection  logic  (electronic  shield) 
has  been  improved  over  its  predecessors,  but  the  system  will 
have  many  of  the  ATC  interaction  problems  that  plagued  ACAS. 
Because  of  these  limits  and  other  detailed  technology  problems, 
the  system  will  not  be  used  in  the  denser  terminal  areas,  but 
will  be  confined  to  operation  in  the  en  route  airspace  and  in 
less  dense  environments  (as  well  as  outside  of  radar  coverage). 
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This  system  can  in  addition  be  made  available  earlier  than  any 
of  its  counterparts.  Experimental  models  of  this  system  have 
been  flight  tested  in  the  New  York,  Washington,  and  Los  Angeles 
areas.  A draft  National  Standard  for  this  system  has  been 
issued  in  order  to  enable  the  airline  equipment  manufacturers  to 
begin  designing  marketable  versions  of  this  system.  Three  engi- 
neering models  are  currently  being  built  for  FAA  by  MIT's 
Lincoln  Laboratory. 

In  its  present  form,  the  Active  BCAS  system  cannot  obtain  the 
directional  information  necessary  to  provide  a traffic  display 
to  the  pilot.  However,  recent  developments  in  the  airborne 
directional  antennas  hold  promise  of  at  least  partially  elimi- 
nating this  restriction  in  the  not-too-distant  future.  FAA  is 
investigating  this  possibility,  and  believes  it  will  be  possible 
to  obtain  a form  of  air-derived  bearing  information  to  provide  a 
proximity  display  with  this  Active  BCAS  system. 

Full  Capability  BCAS 

The  second  type  of  BCAS  system  which  is  under  development  is 
called  the  "Full-capability  BCAS."  It  provides  a more  complete 
service  than  Active  BCAS,  and  makes  use  of  recently  developed 
techniques  and  new  high  speed  computer  technology.  When  opera- 
ting in  radar  coverage,  this  system  can  "listen"  passively  with- 
out adding  interrogations  of  its  own  in  high  density  areas,  and 
will  provide  directional  information  of  much  higher  quality  than 
is  possible  even  with  the  airborne  directional  antenna  mentioned 
earlier.  Because  of  this  important  breakthrough,  this  system 
can  also  provide  both  horizontal  and  vertical  maneuver  commands 
in  addition  to  an  electronic  display  of  surrounding  aircraft. 

Full-capability  BCAS  can  operate  in  multiple  modes  of  active 
and/or  passive  participation  depending  upon  the  radar  coverage 
services  available,  the  equipment  on  board  the  threat  aircraft, 
and  the  density  of  traffic  in  the  surrounding  airspace.  It  pro- 
vides protection  to  a Full -capability  BCAS  equipped  aircraft 
from  any  intruder  carrying  an  altitude  reporting  ATC  Radar  or 
Discrete  Address  Beacon  transponder.  It  also  provides  traffic 
advisories  on  all  aircraft  equipped  with  at  least  Radar  Beacon 
transponder,  with  or  without  altitude  encoding.  BCAS  equipment 
includes  a display,  a processor,  a transmitter  capable  of  making 
interrogations  on  1030  megahertz,  a receiver  capable  of  re- 
ceiving replies  on  1090  megahertz,  top  and  bottom  mounted  direc- 
tional antennas  and  a Discrete  Address  transponder.  The  fre- 
quencies used  by  BCAS  are  the  same  as  those  used  by  the  ground 
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surveillance  systems. 


In  a purely  passive  mode,  BCAS  can  listen  to  the  replies  that 
surrounding  aircraft  make  in  response  to  interrogations  from 
several  ground  ATC  Radar  Beacon  interrogators  (of  which  at  least 
one  is  equipped  with  an  azimuth  reference)  and  can  infer  the 
position  of  own  aircraft  relative  to  other  aircraft.  When  oper- 
ating within  the  coverage  of  only  a single  ATC  Radar  Beacon 
interrogator,  BCAS  can  augment  its  surveillance  by  making  its 
own  active  interrogations  of  the  surrounding  aircraft  and  of  a 
fixed  transponder  placed  on  the  ground  at  the  radar  interrogator 
location.  When  operating  within  coverage  of  a single  Discrete 
Address  Beacon  interrogator,  BCAS  can  infer  the  positions  of 
surrounding  aircraft  by  listening  passively  to  their  replies  to 
DABS  interrogations,  and  by  listening  to  certain  information 
describing  the  current  pointing  direction  of  the  Discrete 
Address  ground  antenna  as  transmitted  by  the  DABS  sensor.  BCAS 
can  also  operate  (albeit  with  somewhat  more  limited  information) 
outside  the  coverage  of  any  Beacon  radars  by  operating  in  a 
purely  active  mode.  In  this  mode,  BCAS  makes  its  own  interro- 
gations and  listens  to  the  replies  of  surrounding  aircraft 
carrying  DABS  or  Radar  Beacon  transponders  to  those  interro- 
gations. Threat  direction  (PWI)  advisories  are  provided  by  em- 
ploying the  directional  antennas  in  the  active  mode. 

Like  ATARS,  BCAS  is  designed  to  provide  traffic  advisories  and 
to  issue  maneuver  advisories  in  the  last  moments  before  colli- 
sion. In  each  of  its  operating  modes,  BCAS  exchanges  informa- 
tion with  another  BCAS  unit  at  the  time  of  detecting  a conflict 
in  order  to  coordinate  the  advisories  being  displayed.  BCAS 
generates  and  displays  traffic  advisory  information  on  threats 
equipped  with  DABS  or  Radar  Beacon  transponders,  with  or  without 
altitude  reporting  capability.  BCAS  decision  thresholds  for 
advisories  are  comparable  to  those  used  by  ATARS.  BCAS  is  cur- 
rently in  the  experimental  stage  and  would  not  be  implemented  in 
its  full  capability  form  for  several  years. 

The  Full-capability  BCAS  described  above  provides  service  in  all 
airspace  well  into  the  1990  time  period.  It  will  provide  backup 
protection  to  equipped  users  in  all  airspace  (particularly  air- 
space with  high  aircraft  densities)  until  ATARS  is  implemented. 

Both  the  full  capability  and  limited  capability  systems  are 
interfaced  with  ATARS  through  the  DABS  data  link.  BCAS  resolu- 
tion advisories  are  suppressed  when  the  aircraft  operates  in  an 
ATARS  service  area. 

The  technology  for  Full-capability  BCAS  is  still  new.  Basic 
experiments  are  now  being  conducted  at  FAA's  National  Aviation 
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Facilities  Experimental  Center.  FAA  is  in  the  process  of  con- 
tracting with  avionics  equipment  manufacturers  for  design 
studies  leading  to  the  construction  of  several  models  of  this 
system  for  test  and  evaluation. 

Time  Frame  for  the  Elements  of  the  Aircraft  Separation 

Assurance  Effort 

As  discussed  above,  no  single  device  can  offer  a complete  solu- 
tion to  the  problem,  thus  a mix  will  be  necessary.  The  ATARS 
system  is  needed  to  deal  effectively  with  the  high  density  areas 
typical  of  the  major  airport  areas.  The  Active  BCAS  or  the 
Full-capability  BCAS  system  can  provide  protection  outside  of 
ground  radar  coverage  and  in  less-dense  regions  (including  por- 
tions of  uncontrolled  airspace)  where  the  ATARS  system  would  not 
be  implemented.  In  addition  the  Full-capability  BCAS  can  backup 
ATARS  in  high  density  airspace,  and  will  provide  the  bridge 
until  DABS/ATARS  is  fully  implemented. 

The  time  frames  projected  for  the  availability  of  the  various 
systems  also  differ.  The  ATARS  and  the  Active  BCAS  systems  are 
furthest  along  in  the  development  process.  Testing  of  DABS  and 
ATARS  will  begin  early  in  1979  at  NAFEC.  Earlier  tests  of  this 
system  were  conducted  in  the  Boston  area  in  1975-76.  Deployment 
of  the  ground  elements  are  expected  to  begin  in  late  1983.  Ex- 
perimental tests  of  the  Active  BCAS  have  been  conducted  and  the 
draft  National  Standard  has  been  issued  this  month. 

The  Full-capability  BCAS  system  is  in  an  earlier  stage  of 
development  than  the  other  two  systems  because  its  technology  is 
much  newer  and  because  it  is  more  complex.  This  system  will 
take  several  more  years  of  development  to  perfect.  Sufficient 
development  data  to  support  a draft  National  Standard  will  be 
available  in  February  1982. 

Dependence  on  ATC  Transponders 
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The  aircraft  separation  assurance  program  depends  on  widespread 
use  of  ATC  Beacon  transponders  with  altitude-encoding  capabil- 
ities. It  presumes  a timely  transition  to  Discrete  Address 
transponders,  especially  for  new  and  replacement  transponder 
purchases.  For  this  reason  the  program  calls  for  altitude  re- 
porting Beacon  transponders  in  all  radar  terminal  areas 
(TCA/TRSA)  by  July  1981,  and  for  DABS  transponders  in  new 
installations  after  July  1982. 
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Prospective  Effectiveness  of  the  FAA  Program 


The  potential  effectiveness  of  the  FAA  program  can  be  illus- 
trated by  examining  how  the  availability  of  the  new  systems 
might  have  affected  past  midair  collisions  and  near-midair  col- 
lisions involving  air  carriers. 

During  the  period  1964-1972  there  were  fifteen  midair  collisions 
involving  at  least  one  air  carrier  (Figure  5).  Those  fifteen 
midair  collisions  resulted  in  271  fatalities.  Two  of  those 
collisions  occurred  under  conditions  that  were  probably  not 
resolvable  by  any  form  of  collision  avoidance  system.  One  was 
a collision  at  Harlingen,  Texas,  that  occurred  at  200  ft.  on 
final  approach  between  a commercial  and  general  aviation  air- 
craft under  conditions  where  neither  BCAS  nor  ATARS  would  have 
been  effective.  The  other  was  a midair  collision  over  Carmel, 
NY,  in  which  two  air  carrier  aircraft  initially  had  adequate 
altitude  separation,  but  a visual  illusion  caused  by  a sloping 
cloud  deck  caused  one  pilot  to  conclude  that  separation  did  not 
in  fact  exist.  As  a result  he  pulled  up  into  and  collided  with 

the  other  aircraft.  This  was  a clear  case  of  human  error. 

Thirteen  of  the  fifteen  midair  collisions  occurred  under  condi- 
tions where  either  the  Automatic  Traffic  Advisory  and  Resolution 
Service  System  or  the  Full -capability  BCAS  might  have  prevented 
the  collision.  All  of  these  collisions  occurred  in  Beacon 
ground  system  coverage.  Considering  the  risks,  the  use  of 
Full-capability  BCAS,  or  of  DABS/ATARS  in  coverage  plus  active 
BCAS  for  use  outside  coverage  areas,  are  judged  to  be  equiva- 
lently valuable  services. 

Eight  of  the  fifteen  midair  collisions  might  have  been  prevented 
through  the  use  of  Active  BCAS  if  the  traffic  level  had  been  at 

levels  experienced  in  1975.  If  the  traffic  had  been  at  the 

level  expected  in  1995  it  is  judged  that  Active  BCAS  performance 
would  have  been  degraded  and  that  it  would  have  been  successful 
in  only  six  cases. 

Another  way  to  view  the  relative  merit  of  the  various  collision 
avoidance  systems  is  to  examine  their  potential  effectiveness  at 
preventing  near-midair  collisions.  An  advantage  of  using  near- 
midair collision  data  is  that  the  near-midair  collisions  occur 
more  frequently  than  do  the  fortunately  rare  midair  collisions 
and  thus  provide  a larger  number  of  data  samples.  A disadvan- 
tage of  using  such  data  is  that  the  data  is  based  on  reports  of 
individuals  who  have  some  motivation  to  submit  such  a report. 
There  are  probably  other  near-midair  collisions  that  are  not 
reported,  and  the  reported  cases  may  not  be  fully  representative 
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FIGURES 

ATARS/BCAS  PERFORMANCE  ASSESSMENTS  1964-1972-NEAR-MIDAIR  COLLISIONS 

INVOLVING  AT  LEAST  ONE  AIR  CARRIER 


of  the  distribution  of  near-midairs  throughout  the  system,  or  of 
the  conditions  under  which  they  occur.  The  near-midair  reports 
do,  however,  provide  an  indication  as  to  where  improvements  are 
possible. 

Out  of  the  227  near-midair  collision  reports  tabulated  in  Figure 
1,  52  involved  at  least  one  air  carrier  aircraft  (Figure  6). 
All  52  were  potentially  preventable  through  the  use  of  the  Full- 
capability  BCAS.  Five  of  those  52  near-midair  collisions  oc- 
curred outside  the  hypothesized  ATARS  coverage  with  the  result 
that  ATARS  would  have  been  effective  in  47  cases. 

The  five  cases  falling  outside  ATARS  coverage  were  likely  to 
have  been  preventable  with  Active  BCAS.  It  was  judged  however 
that  active  BCAS  would  not  have  been  effective  in  11  cases  oc- 
curring in  the  higher  density  terminal  areas  — cases  where 
ATARS  and  the  full-capability  BCAS  were  judged  as  likely  to  be 
effective.  Thus  Active  BCAS  might  have  prevented  a total  of  41 
of  the  52  near-midairs. 

This  brief  and  simplified  review  of  midair  and  near-midair 
collision  data  indicates  that  ATARS  has  the  potential  of  pro- 
viding for  a significant  increase  in  collision  avoidance  pro- 
tection within  the  airspace  receiving  ATARS  services.  The  data 
also  indicates  the  need  for  additional  protection  outside  of  the 
ATARS  airspace,  and  FAA  believes  active  BCAS  is  the  most  suit- 
able answer. 

Even  in  1990  most  of  the  airspace  over  the  contiguous  48  states 
will  lie  outside  the  high/medium  density  areas  (Figure  7).  This 
is  the  airspace  where  an  active  BCAS  system  would  be  the  most 
effective.  Either  ATARS  or  the  Full-capability  BCAS  would  be 
needed  to  provide  a high  level  service  within  the  circleJ  high/ 
medium  density  areas.  The  active  BCAS  would  also  provide  some 
protection  in  these  areas  under  certain  conditions  but,  in 
general,  active  BCAS  performance  would  be  degraded,  and  likely 
not  available. 

Figure  8 shows  a plan  view  of  the  ATARS  coverage  that  would  be 
realized  if  ATARS  were  installed  at  162  Airport  Surveillance 
Radar  sites  and  effective  out  to  a distance  of  50  nmi  from  each 
site.  A comparison  of  the  high/medium  density  areas  of  Figure  7 
with  the  hypothesized  ATARS  coverage  Figure  8 shows  that  all 
high/mediun  density  areas  would  receive  separation  advisories 
from  at  least  one  ATARS  site. 
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ATARS  AT  162  AIRPORT  SURVEILLANCE  RADAR  SITES. 
50  nmi  RADIUS  OF  EFFECTIVENESS. 


FIGURES 

COVERAGE  SUPPORTING  ATARS 


Developments  for  Lower  Activity  Airports 


With  the  provision  of  ATARS,  and  the  carriage  of  BCAS  by  air 
carriers  and  some  general  aviation  — especially  the  coinmuter 
carriers  — the  major  sources  of  public  transportation  colli- 
sions and  fatalities  within  the  controlled  system  and  at  the 
boundary  between  controlled  and  uncontrolled  airspace  are 
addressed.  One  remaining  portion  of  the  program  is  directed  to 
the  general  aviation  operations  at  small  uncontrolled  airfields 
which  do  not  now  have  towers  today  but  support  a large  enough 
number  of  operations  to  cause  concern  about  the  risk  of  colli- 
sions and  consideration  of  providing  a VFR  tower  with  all  of  its 
limitations.  A new  capability  now  under  development,  the  Auto- 
mated Terminal  Service  (Figure  9),  is  designed  to  reduce  the 
risk  of  collision  at  such  airports  and  to  provide  other  services 
as  well.  Through  the  use  of  the  ATC  Radar  Beacon  system  with 
altitude  encoding,  and  an  automated  voice-response  system,  the 
Automated  Terminal  Service  provides  traffic  advisories  to  the 
aircraft  in  the  pattern,  management  of  the  traffic  pattern  it- 
self in  terms  of  sequencing,  as  well  as  the  normal  weather  and 
runway  advisory  services  provided  by  the  Automated  Terminal  In- 
formation Service  at  larger  airports.  This  system  may  provide  a 
more  cost  effective  solution  than  the  installation  and  operation 
of  a tower. 

The  additional  provision  of  a Discrete  Address  interrogator  with 
its  data  link  at  these  facilities  would  support  the  addition  of 
an  ATARS  type  service.  Such  a service  would  provide  both  im- 
proved collision  protection  in  and  around  the  airport,  and  addi- 
tional sources  of  low  altitude  coverage  of  the  Automated  Traffic 
Advisory  and  Resolution  Service.  The  avaiability  of  DABS  Data 
Link  and  ATARS  at  ♦’hese  low  density  fields  would  provide  a 
system-compatible  approach  to  addressing  the  collision  risk  out- 
side controlled  airspace. 


23 


FIGURES 

AU  rOMATED  TERMINAL  SERVICE  (ATS)  CONCEPT  FOR  SMALL  GENERAL  AVIATION  AIRPORTS 


Sunwiary 

FAA's  aircraft  separation  assurance  program  offers  compatible 
collision  protection  both  within  and  outside  the  controlled  sys- 
tem. 

In  the  controlled  airspace  where  most  all  air  carriers  and  many 
commuters  anB  TrTitrumervt- equipped  general  aviation  aircraft 
routinely  fly,  the  primary  source  of  separation  assurance  will 
continue  to  be  the  air  traffic  control  system  backed  by  the  Con- 
flict Alert  service. 

To  provide  a backup,  three  interrelated  elements  were  announced 
in  the  Administrator's  plan  of  27  December  1978: 

0 Within  coverage,  the  Discrete  Address  Beacon  System  and 
the  Automated  Traffic  Advisory  and  Resolution  Service 
will  provide  the  primary  backup  to  the  air  traffic  con- 
troller in  both  medium  and  high  density  areas  as  well  as 
in  the  en  route  system  at  high  altitudes. 

0 Where  cove’^age  is  limited  or  traffic  is  light,  the  Bea- 
con Collision  Avoidance  System,  either  Active  or 
Full-capability  BCAS,  as  chosen  by  the  operator,  will 
provide  protection  against  uncontrolled  transponder- 
equipped  aircraft  operating  in  and  around  the  fringes  of 
the  controlled  system. 

0 Clearance  verification  via  DABS  Data  Link  which  will 
result  in  reductions  in  misunderstanding  between  pilots 
and  controllers  as  to  the  parameters  of  each  air  traffic 
clearance.  This  in  itself  should  assist  in  reducing 
system  errors  and  associated  near-midair  collisions. 

These  efforts  depend  on  widespread  carriage  of  either  Discrete 
Address  or  conventional  Beacon  transponders  with  altitude  en- 
coding in  order  to  provide  the  maximum  protection  to  the  users. 

Outside  controlled  airspace,  in  regions  in  which  primarily  com- 
muter, air  taxi,  and  the  small  general  aviation  aircraft  oper- 
ate, FAA  expects  to  provide  three  levels  of  service  for  colli- 
sion protection: 

0 Where  low  altitude  radar  coverage  exits  from  the  DABS 
sites  of  the  controlled  system,  or  where  it  can  be  ex- 
tended through  provision  of  DABS  at  the  Automated  Termi- 
nal Service  locations,  a primary  source  of  collision 


25 


avoidance  protection,  that  is,  the  Automated  Traffic 
Advisory  and  Resolution  Service,  will  be  available. 

0 At  small  general  aviation  airports  that  might  in  the 
future  qualify  for  a Control  tower  because  of  traffic 
densities  or  collision  risk,  improved  services  through 
the  provision  of  the  Automated  Terminal  Service  will  be 
available. 

0 Finally,  at  the  smaller,  lower  density  fields  that  make 
up  the  bulk  of  12,500  airports  in  this  country,  FAA  will 
continue  to  rely  on  the  use  of  basic  air  traffic  proce- 
dures plus  the  communications  provided  by  UNICOM  ser- 
vice. FAA  expects  that  in  order  to  provide  effective 
UNICOM  service  to  sufficient  airports,  discrete  airport 
frequencies  will  have  to  be  assigned,  and  this  effort  is 
underway. 
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APPENDIX  A 

AIRBORNE  COLLISION  AVOIDANCE  SYSTEMS 


The  first  attempt  at  developing  a Collision  Avoidance  System  in 
an  independent  airborne  system  was  spearheaded  by  the 
McDonnell -Doug las  Corporation  in  the  early  1960's,  working  pri- 
marily with  the  airlines.  The  system  they  developed  used  tech- 
nology that  was  advanced  for  the  time,  and  was  based  upon  the 
use  of  expensive  and  delicate  atomic  clocks.  The  system  did  not 
make  use  directional  information,  and,  consequently,  could 
provide  only  vertical  avoidance  maneuvers  only  — climb,  de- 
scend. Limited  flight  tests  of  this  system  were  conducted  by 
the  Martin-Marietta  Corporation  in  1968  and  1969.  To  complement 
this  hardware  development,  the  airlines  developed  and  published 
a set  of  computer  logic  defining  the  desired  alarm  parameters, 
warning  times,  etc.,  which  matched  the  capabilities  of  this  de- 
vice. 

While  the  McDonnell -Douglas  system,  called  "EROS,"  was  being 
perfected,  two  other  companies  entered  the  collision  avoidance 
field;  RCA  began  developing  an  airborne  system  which  they  called 
"SECANT,"  and  Minneaoolis-Honeywell  undertook  the  development  of 
an  airborne  system  called  "AVOIDS."  While  different  in  the 
technology  used,  the  RCA  and  Honeywell  systems  were  almost  iden- 
tical in  concept  to  the  McDonnell -Douglas  approach.  None  of 
these  systems  had  directional  information  available  and  all  were 
limited  to  vertical  escape  maneuvers. 

The  RCA  and  Honeywell  proposals  used  then  newly-feasible  tech- 
nology and  were  potentially  lower  in  cost  than  the  McDonnell 
device.  Within  the  aviation  industry,  these  three  systems 
collectively  became  known  as  "ACAS"  systems  — Airborne  Coll- 
ision Avoidance  Systems. 

In  1971,  the  FAA  undertook  a comprehensive  program  to  complete 
the  development  and  to  evaluate  all  three  of  these  systems.  FAA 
awarded  contracts  to  all  three  of  these  manufacturers  to  obtain 
operating  systems  for  flight  test.  A series  of  simulations  was 
conducted  at  FAA's  National  Aviation  Facilities  Experimental 
Center  (NAFEC)  in  Atlantic  City,  New  Jersey,  to  assess  how  the 
systems  would  perform  under  varying  traffic  and  operational  con- 
ditions. A joint  flight  test  program  was  established  with  the 
Department  of  Defense  in  which  live  flight  tests  were  conducted 
at  NAFEC  and  at  the  Naval  Air  Development  Center  in  Warminster, 
Pennsylvania.  This  program  of  evaluation  was  completed  in  1975. 
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The  fundamental  conclusions  of  this  evaluation  were: 


0 All  of  these  systems  were  limited  to  use  outside  the 
dense  terminal  areas  since  they  produced  undesirable  ATC 
interaction  or  false  alarm  problems  when  operating  in 
the  dense  terminal  regimes. 

0 All  of  these  systems  lacked  an  important  evolutionary 
capability  in  that  they  could  not  be  introduced  grad- 
ually and  build  upon  the  current  ATC  system  base.  These 
systems  were  fully  cooperative  and  required  that  new 
equipment  be  installed  almost  simultaneously  in  most 
aircraft  to  achieve  protection.  The  first  person  who 
bought  the  system  received  no  protection  until  others 
installed  the  device. 

0 These  systems  would  not  provide  protection  against 
foreign  aircraft  operating  in  U.S.  airspace  since,  as  a 
practical  matter,  such  action  would  require  worldwide 
standardization  of  these  systems  and  adoption  by  the 
International  Civil  Aviation  Organization  — an  unlikely 
prospect  since  there  was  little  international  interest 
in  collision  avoidance  systems. 


